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IN THE CLAIMS 

This listing of claims will replace all prior versions, and listings, of daims in th€ 
application: 

1. (Currently Amended) A method of processing packets at a firewall in a packet- 
switched network comprising: 

receiving an outbound packet from a process group network address; and 
authorizing subsequent inbound packet traffic destined for the process group 

no4.Mnrk artHraQ g , ^^M(^mm said process orouD network address is assigned to a 

transient ha«it process group . 

2. (Original) The invention of claim 1 further comprising the subsequent step of 
canceling authorization for subsequent inbound packet traffic destined for the process 
group network address after a period of time. 

3. (Original) The invention of claim 2 wherein the outbound packet begins a connection 
protocol and authorization is canceled after the connection terminates. 

4. (Original) The invention of claim 1 wherein the addresses are expressed as IPv4 
address. 

5. (Currently Amended) The invention of claim 1 wherein the addresses are expressed 
as IPv6 addresses, wherein a portion of the address is reserved to identify [[aj] said 
host process group. 

6. (Currently Amended) A method of processing packets at a host which are destined 
for a firewall in a packet-switched network comprising the steps of: 

assigning a process group network address to a first outbound packet 
commencing a transient process; 
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transmitting the outbound packet to a firewall on its path to its destination in a 

packet-switched network; 

receiving inbound packets addressed to the process group network address; and 
authorizing, based on the process gro up network address feeeiviftg and 

associating inbound packets addressed to the process group network address with the 

transient process. 

7. (Currently Amended) The invention of claim 6 wherein the transient process is a 
connection across the packet-switched network to another host. 

8. (Currently Amended) The invention of claim 6 further comprising the step of notifying 
the firewall when the transient process tenminates. 

9. (Original) The invention of claim 6 wherein the host uses a dynamic host 
configuration protocol to dynamically assign the process group network address. 

10. (Currently Amended) A computer readable medium containing executable program 
Instructions for perfonming a method on a firewall connected to a packet-switched 
network comprising the steps of: 

receiving an outbound packet from a process group network address; and 
authorizing subsequent inbound packet traffic destined for the process group 

network addrfiss , wherein said process group network address is assigned to a 

transient host process group , 

1 1 . (Original) The invention of claim 10 further comprising the subsequent step of 
canceling authorization for subsequent inbound packet traffic destined for the process 
group network address after a period of time. 

12. (Original) The invention of claim 11 wherein the outbound packet begins a 
connection protocol and authorization is canceled after the connection terminates. 
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13. (Original) The invention of claim 10 wherein the addresses are expressed as IPv4 
address. 

14. (Currently Amended) The invention of claim 10 wherein the addresses are 
expressed as IPv6 addresses, wherein a portion of the address is reserved to identify 
[[a]] said host process group. 

15. (Currently Amended) A computer readable medium containing executable program 
Instructions for performing a method on a host connected to a packet-switched network 
comprising the steps of: 

assigning a process group network address to a first outbound packet 
commencing a transient process; 

transmitting the outbound packet to a firewall on its path to Its destination in a 
packet-switched network; 

receiving inbound packets addressed to the process group network address; and 

authorizing, based on the process group network address r e c e iving and 
associating inbound packets addressed to the process group network address with the 
transient process. 

1 6. (Currently Amended) The invention of claim 15 wherein the transient process is a 
connection across the packet-switched network to another host. 

17. (Currently Amended) The invention of claim 15 further comprising the step of 
notifying the firewall when the transient process terminates. 

18. (Original) The invention of claim 15 wherein the host uses a dynamic host 
configuration protocol to dynamically assign the process group network address. 
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